Behavioral task
behavioral1
Sample
5c41d119bc3c71fc4576c4d07dffa992.exe
Resource
win7-20231215-en
General
-
Target
5c41d119bc3c71fc4576c4d07dffa992
-
Size
1.4MB
-
MD5
5c41d119bc3c71fc4576c4d07dffa992
-
SHA1
e5bc7e2c2f644ecf4fb5f1cb67aaa07c49f30898
-
SHA256
3415cf3d5fc4c74b7ba9dd3adb86f0d79af4266847fb0ed61a311183e5917bc6
-
SHA512
225d2f023ccaf50ccc097e3a47ea6d018b32a14dbb33db712896c7700660dc408a8cb276364b363cda375a119ffe08859807818950576624fc9a95bd7f6dd033
-
SSDEEP
24576:t/yknn5kTdDgCq24Kxf7+6vexdbphaoZW/sjAOrfLYzJQFnkwZKiE2Z:NyknqBDUdKB76Lhj0sjAOrfLYtYxZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c41d119bc3c71fc4576c4d07dffa992
Files
-
5c41d119bc3c71fc4576c4d07dffa992.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE